Remix.run Logo
bilekas 2 days ago

It's too late and never about children, simply deeper forms of data harvesting and surveillance.

What makes me extremely sad and concerned is that more recent generations simply have no idea or expectation of privacy online anymore. There will never be more of a fight against all this Orwellian behavior.

smartmic 2 days ago | parent | next [-]

It’s only too late when we stop fighting back and accept it as a given. Don’t underestimate civil disobedience and the hacker spirit.

GeoAtreides 2 days ago | parent | next [-]

UK showed how to deal with civil disobedience (fast tracked judicial process). Hardware attestation will deal with the hacker spirit.

Above all, the LLM panopticon will watch us all.

Technology will not save us. Nothing will save us but ourselves and we're busy making rent and doomscrolling.

nclin_ 2 days ago | parent | next [-]

We won't save ourselves. We might slow the process, but the information environment is permanently altered and we can't put it back.

The information asymmetry between individuals and the powerful is permanently reversed.

Thinking about it in terms of the monopoly of violence being the root of power negotiations; typically a resistance movement has more information about the state/colonizer than vice versa, because power has to be visible - guerilla warfare thrives on this.

That's gone. The powerful will have complete detailed information and automatic analysis.

The medium is the message.

int_19h 2 days ago | parent | prev | next [-]

There will always be some form of underground.

What's different is that, for a while, the early Internet age (and a little bit earlier - Usenet etc) made that underground very accessible. Now we're reverting back to the original situation where it was very much shunned and criminalized.

Nursie 2 days ago | parent | prev | next [-]

> UK showed how to deal with civil disobedience (fast tracked judicial process)

What is it you mean by this?

I see so many offhand comments about the dystopian UK here but AFAICT there’s a lot of noise and very little meat. The only thing I can think you mean is the UK is currently debating a bill to limit jury trials to more serious offences. While I do find that pretty offensive, there’s nothing fast track about any of its justice system at the moment.

On the contrary, people are waiting years for trial, which is bad for the accused because they have it hanging over them, and bad for victims who get no swift resolution.

GeoAtreides 2 days ago | parent | next [-]

I meant the way it deal with the southport rioters (no judgement value on the riot itself or its reasons, just noticing how the uk gov dealt with the it)

For example:

>Courts will sit for 24 hours to fast-track sentencing under government plans to crack down on far-Right riots that swept Britain on Saturday.[1]

[1]https://www.telegraph.co.uk/news/2024/08/03/courts-open-24-h...

There is also this:

>Only Australia arrested climate and environmental protesters at a higher rate than UK police. One in five Australian eco-protests led to arrests, compared with about 17% in the UK. The global average rate is 6.7%.

>The UK’s Police, Crime, Sentencing and Courts Act 2021 and the Public Order Act 2022 transformed the relationship between protesters and the state, handing police extensive new powers to curtail protests and criminalising a range of protest activities. [2]

[2] https://www.theguardian.com/environment/2024/dec/11/britain-...

Boot, face, forever, etc

Nursie 2 days ago | parent [-]

Honestly, so long as there is adequate time for everyone to prepare and adequate oversight, fast tracking like seems to me far preferable to waiting for 2-3 years!

And given the Southport riots were, well riots, it’s unsurprising they were dealt with harshly.

That said, I agree that what’s happening with protest in both the UK and Australia is deeply wrong. New South Wales in particular seems to be awful on this front.

It’s a shame that guardian article doesn’t link to the actual study.

It’s not especially surprising that there is a high rate of arrests in the subcategory of protests they picked - environmental (not climate) protests often involve things like blockading mine sites and blocking roads here in Aus. In some of the countries mentioned in the article you may just be physically moved, beaten or even shot for that behaviour. Which is not to say that the higher arrests aren’t concerning, but the picture isn’t exactly clear after reading the article, particularly as it mentions over 2000 environmental protestors were killed during that period, I’d hope none in the UK or Aus, which to me that even though the arrests aren’t rates are higher in these countries, to imply that they are the worst in their treatment of protest is probably wrong.

GeoAtreides 2 days ago | parent [-]

>And given the Southport riots were, well riots, it’s unsurprising they were dealt with harshly.

you didn't read or care to understand my argument at all, which is not about the target of the process, but the existence of the process and the process itself. Looks like I have to spell it out: next time won't be race rioters, next time will be protesters protesting the farage gov crackdown on immigrants and minorities.

>It’s not especially surprising that there is a high rate of arrests in the subcategory of protests they picked

the article mentions the rate of arrests is high COMPARED with other countries. And again you're getting lost in the details; this wasn't about what the protests were about, but the brutal swift crackdown AND the laws passed giving police more powers.

Yes, this time they hit your out-group, so all is well. fine. next time, (and this is the crux of my argument), _using the exact same tools_, it's your group, you, that will be targeted.

Nursie 2 days ago | parent [-]

> the existence of the process

Yes, I know you think it’s bad that it exists. I don’t.

So long as it is carried out with proper oversight and people have time to prepare their cases, it actually appears preferable to endless delay which is the current hallmark of the British justice system. Do you disagree? Why?

Do you have a reason to think that justice served this way is less fair or rigorous?

Because frankly I’d rather get in the express lane at that point if I was on the receiving end, than have to live with the process over my head for 2-3 years.

> the article mentions the rate of arrests is high COMPARED with other countries.

Yes, and it also says some of those other countries are killing environmental protestors, so the picture is not as clear cut as you might like. It certainly suggests problems, but it also suggests that we may not be comparing apples to apples with these figures.

Seriously, maybe read it again if you think this is entirely un-nuanced. Personally I’d like to know more.

I agree with you that giving the police extra powers is bad. I agree the direction of travel is bad.

I disagree that faster justice is bad.

I disagree that a higher arrest rate than other countries on a subset of protests is as black and white as you think.

gib444 2 days ago | parent | prev [-]

Presumably the 2011 riots: a college student with no criminal record was jailed for six months for stealing a £3.50 case of bottled water [0]

Or perhaps our current Home Sec in 2014 declaring "Rioters face years in prison as Home Secretary Yvette Cooper promises ‘swift justice’" [1]

[0] https://www.telegraph.co.uk/news/uknews/crime/8695988/London...

[1] https://www.standard.co.uk/news/crime/riots-prison-justice-l...

It's all part of making effective protesting illegal. You can justify each little step as you clutch your pearls (even me, to an extent if I don't think of the bigger picture), but then when you realise that the sum of all that is permitted is standing alone creating no disturbance for anyone, effecting no change, and you realise effective protesting is banned.

Nursie 2 days ago | parent [-]

Those riots in 2011 were not protest in any meaningful way. I was in London at the time, it was a bunch of people stealing shit and setting fires because they thought they could. What was shocking was how hands-off the police were when they routinely kettle and arrest peaceful protestors. When confronted with people who were actually looting and burning stuff down, they were nowhere to be seen.

And the second article is about people setting fire to cars and buildings.

This is not “effective protest”, it’s criminal damage and arson and would be prosecuted as such in any western nation.

Are you seriously arguing you should be able to get away with setting fire to a community library because you reckon you’ve got a legit grievance?

Yeah nah, no thanks.

gib444 2 days ago | parent [-]

I neither argued that the 2011 riots were protest nor that setting fire to a community library is justified.

Are there any strawmen left or did you buy them all? Jesus

"Are you seriously arguing...?" style of discussion belongs to Reddit, not here.

Though it's clear that you are part of the pearl-clutching group that wants any protest banned and would support any law and any new law dreamt up by a Home Sec, so thanks for doing your bit. No doubt you believe "the law is the law" and any law is just.

edit: You're not British are you (based on your English – it's pretty good, but not quite good enough). Where were you born, out of interest? I always enjoy a foreigner lecturing me about my place of birth

Nursie 2 days ago | parent [-]

LOL. Home-counties born and bred, attended a minor public school and a Russel group university. Grandad was a Desert Rat, one grandmother was brought up in colonial India. I’m so English I’m a fucking stereotype, though it’s true I no longer live there.

Perhaps my English is so superior to yours that you’re having trouble understanding?

> Though it's clear that you are part of the pearl-clutching group that wants any protest banned

What were you saying about straw men?

Perhaps you could enlighten me here. If you believe that promising swift justice for arsonists and other rioters is a way to suppress effective protest, are you not categorising arson as a form of protest? If not, what is your objection to said swift justice for people who commit acts of criminal damage, arson etc?

I support the right to protest. I believe the UK state is on a bad path and has been for a long time with restrictions on this right. But it gives me no pause when rioting and looting is treated harshly.

gib444 2 days ago | parent [-]

Sure, with those over-corrected "’" apostrophes. "I’m so English I’m a fucking stereotype" is such a contorted sentence.

"The UK has problems, but it's not very useful to throw all of these cases together to make a big number", "None of which is to say I think the UK has things right" – literally nobody native to the UK writes like that.

Again, nice try, but try harder.

I'm /actually/ from a home county ;)

edit: Home counties isn't hyphenated btw.

Nursie 2 days ago | parent [-]

This has got to be the weirdest conversation I’ve ever had on here.

I have no reason to lie, nor do I have either a method or any particular desire to prove myself to you.

If you want to believe a foreigner is lecturing you on British society, you go ahead and live with that delusion I guess. :shrug:

> literally nobody native to the UK writes like that.

Have you hung around with many middle-aged ex public school types?

gib444 2 days ago | parent [-]

NOR any particular desire

I thought a 'public school type' would know that.

> Have you hung around with many middle-aged ex public school types?

Yes, I've been unfortunate enough to live in the heart of Surrey

You're trying to call me uneducated to distract from your poor attempt at passing off as a native. Nice try ;) (They tend not to write ":shrug:", I might add)

I hope it's not too cold in Russia! Have a great evening comrade.

Nursie 2 days ago | parent [-]

> NOR any particular desire

“Nor” doesn’t fit there IMHO, “or” is part of the nested either-or clause, so I don’t believe it to be incorrect.

Regardless, I lay no claim to perfect grammar, decades on the internet seems to have atrophied that skill. I also acknowledge my overuse of commas.

> You're trying to call me uneducated to distract from your poor attempt at passing off as a native

Funny, because to me it looked a lot like you started to throw doubt on my nationality when you didn’t want to deal with the subject we were discussing any more.

> I hope it's not too cold in Russia!

I hope it’s fucking freezing and Vladimir Putin freezes his balls off, personally. It couldn’t happen to a nicer dictator.

The fact you’re hoping for milder weather in Russia reveals that you are in fact the Russian troll in this conversation. Confirmed by your signoff calling me comrade. Major cockup there eh? Your handler will not be pleased…

gib444 2 days ago | parent [-]

> The fact you’re hoping for milder weather in Russia reveals that you are in fact the Russian troll in this conversation.

It's so funny how badly you misunderstand English.

This is highly entertaining :)

Nursie 2 days ago | parent [-]

Not for the first time, I was taking the piss out of you for how ridiculous this whole thread is. I guess you missed that though.

You don’t get sarcasm then Ivan?

Velocifyer 2 days ago | parent | prev [-]

[flagged]

dang 2 days ago | parent [-]

Hey, could you please review the site guidelines and stick to them when posting here? We'd appreciate it.

https://news.ycombinator.com/newsguidelines.html

bilekas 2 days ago | parent | prev | next [-]

While I agree with you, my worry is that younger generations have been conditioned to just expect privacy invasions, and I hear the same "Well I have nothing to hide" more and more with my younger family at least.

girvo 2 days ago | parent | next [-]

> and I hear the same "Well I have nothing to hide" more and more with my younger family at least.

Which is funny as thats what I heard from my older family growing up. Except it's a lie and they have plenty to hide!

ori_b 2 days ago | parent | prev [-]

"Pass me your phone, I want to screenshot a few things and post on social media".

drnick1 2 days ago | parent | prev | next [-]

Absolutely, but this can only happen if we refuse to run nonfree software on our machines. Even if the maintainers of a Linux distro decided to somehow implement some anti user feature like age attestation, it would be trivial to patch that out from the source or to remove it from a running system with root access. The real danger here is devices that are not fully owned by the user, such as iPhones.

nandomrumber 2 days ago | parent [-]

And the overwhelming majority of anything running Android.

catlifeonmars 2 days ago | parent | prev | next [-]

This. Fatigue and despair are by far the most effective way to control a population. You don’t need to convince people you’re doing the right thing, you just have to convince them that it’s too late.

bigyabai 2 days ago | parent | prev [-]

I do underestimate the hacker spirit. HN's response to Client Side Scanning was disheartening, barely anyone could condemn Apple despite the obvious red-line being crossed: https://news.ycombinator.com/item?id=28068741

And once you step outside HN, forget it. You can save yourself, but there are thousands of people that do respond to the "think of the children!" nonsense and will call you a creep for objecting to it. It's game over now, you will fight against this for the rest of your life.

gzread 2 days ago | parent | next [-]

HN is mostly for people with entrepreneur spirit, not hacker spirit - entrepreneurs who want to be known as hackers. The difference is vast.

chinabot 2 days ago | parent [-]

big opportunity here for therealhackernews.com

gzread 2 days ago | parent [-]

Not really. You couldn't get the network effect. Real hackers hang out on IRC.

Cider9986 2 days ago | parent | prev [-]

That was almost 5 years ago. Lately, though, I see more people have stopped tolerating these attacks on freedom. See pewdiepie, louis rossman, deflock, piracy ressurection. Uk petition against digital ID becomes one of the largest petitions in history.

https://petition.parliament.uk/petitions/730194

tqi 2 days ago | parent | prev | next [-]

I think it would be helpful to engage with the possibility that they are neither stupid nor ignorant, rather that they simply have different values and priorities than the early internet users.

2 days ago | parent | next [-]
[deleted]
Levitz 2 days ago | parent | prev | next [-]

And what would those values and priorities be? Because it doesn't seem to me that they align with what they actually do.

For example, it seems to me there is a whole lot of worry around megacorporations, often related to capitalism and the inequalities it brings.

In that context, if you don't place privacy as a priority, how are you not either stupid or ignorant? Is my premise just wrong?

ndriscoll 2 days ago | parent | next [-]

You can be in favor of privacy while simultaneously thinking porn, gambling, and advertisers shouldn't be targeting children. The age verification bills I've read have steep penalties for retaining information, so that seems fine since that's literally more protection than you get in person.

It's really more just concluding that those corporations should be liable for their behavior. It also has nothing to do with "the Internet" which is largely unaffected. Except of course ideas for forcing OS behavior coming out of California which are obviously bad.

I actually think things could be a lot simpler if we just made the laws like alcohol: it's illegal (with criminal liability) for a non-parent adult to provide <restricted thing> to a child. Simple enough. Seems to work fine as-is for Internet alcohol purchases. Businesses dealing in restricted industries can figure out how to avoid that liability. That's entirely compatible with making it illegal for businesses to stalk everyone, which we should also do!

choo-t 2 days ago | parent | next [-]

> The age verification bills I've read have steep penalties for retaining information, so that seems fine since that's literally more protection than you get in person.

The best way (and only way) to prevent retaining information is to not share them in the first place.

> You can be in favor of privacy while simultaneously thinking porn, gambling, and advertisers shouldn't be targeting children.

There are other method to achieve this without mandatory identification. You can force these content to be served with an HTTP header providing their legal minimum age of consultation or type of content, and blocking them browser side. Governments could maintain filter lists for different age bracket and release them to everyone, allowing easy compliance on the device parental control settings.

ndriscoll 2 days ago | parent [-]

Headers could maybe work in a world where the technology were ubiquitous and people knew how to set it up (c.f. v-chip's failures), and kids couldn't just buy their own device for $20 and use it on the actually ubiquitous free pubic wi-fi to avoid any restrictions.

And actually I think it's a better world where kids can obtain e.g. a raspberry pi that they completely control no questions asked and free public wi-fi exists all over, and the onus is on service providers to not deal with children if they're not supposed to. Basically, a high trust society.

In any case, "don't retain records" is actually a pretty easy task. Trivial, actually (use a device with no disk to handle PII, an API that just returns yes/no to the rest of the system, and heavily restrict the firewall, e.g. no outbound connections). Or you buy a token/gift card in person with ID check. If you think the penalties aren't steep enough to get compliance, just raise them (e.g. business ending fines plus jail time).

fc417fc802 2 days ago | parent | prev [-]

If you implemented that simple solution the expected outcome is businesses collecting ID at the door. But unlike the age verification bills there'd be no prohibition of or penalty for misuse of the collected information. It's a strictly worse outcome.

You can make intentional targeting illegal without criminalizing the accidental. And mandating self categorization of content by service providers would enable standardized filtering that was broadly effective.

The above won't get kids off of social media and it won't serve the purposes of the surveillance state but it will meet the stated goals of those pushing these measures.

Keeping children off of social media is a much trickier problem. I think we'd be better served by banning certain sorts of algorithmic feeds.

ndriscoll 2 days ago | parent [-]

Okay, so make it illegal for them to record any information which is what the actual laws do (or better, explicitly criminalize all the other current stalking). The point is you don't need to be prescriptive about how to prevent children from accessing the sites. Just make it so you can face massive fines and be arrested if you don't. They can figure out how to comply with the law, and they can be effective or be shut down.

They're not actually owed a solution for how to make their business model work. They can just be told that what they're doing is unacceptable, and they can figure out what they'd like to do next. If you're worried they might react with some other unacceptable thing, we can clarify that that's not okay either.

fc417fc802 2 days ago | parent [-]

I agree that open ended requirements are better than the imposition of prescriptive solutions. But I don't want online ID verification and that's where your proposal logically leads so I am equally opposed to it.

> They're not actually owed a solution for how to make their business model work. They can just be told that what they're doing is unacceptable,

You listed a few different things previously. Which one are we talking about here?

I think the rest of us are owed a solution where we can still do what we want without having our privacy violated. Regulations need to take the end user into account.

I already proposed what I think would be a workable solution to achieve the stated goals without unduly eroding the status quo. Do you have any response to it?

ndriscoll 2 days ago | parent [-]

Self categorization has been the status quo since the 90s and has proven to be insufficient. More generally, assuming people agree that something is a social problem/should be restricted, I don't think "have a third party come up with a solution that people can buy to filter us" makes sense. The liability belongs on the people dealing in the restricted item.

We don't give kids special debit cards that detect and block purchases of cigarettes and alcohol and say "make sure your kids don't get cash". We make it a crime to sell those things to a child.

Why is online ID verification a problem for e.g. porn and gambling but it's fine for alcohol? Why should it be fully anonymous? Should we also allow anonymous porn and cigarette vending machines in person? Why is online special?

This whole idea of anonymous access can't even work in a world where you actually pay for things online, which makes the whole proposition even more dubious. If you're an adult and spending money online, you already told them who you are (modulo darknet markets with crypto). Or you could buy a porn gift card in person with an ID flash like other restricted physical items if you're uncomfortable with online payments. And treat the gift card as restricted as well: giving it to a minor is a crime. So then what's the problem exactly? Ad supported porn specifically somehow is important enough to be special?

More to the point: as far as I know, if you perform a sex act in plain view inside of a private establishment that's open to the general public with no restrictions, then that's public indecency/lewd conduct, a criminal act, even if the owner consents. If children are present it can become a felony and you're going on the sex offender list along with jail time. Why is an unrestricted public website different?

Why are you "owed" this privacy online when someone running an open to all, fully anonymous, unchecked porn theatre in person would be arrested? How about the privacy you are owed is that your business stays between you and whomever you interact with, and even they can be asked/required not to keep or share notes about you? But they can still be expected to know you are an adult before they sell you adult services.

fc417fc802 2 days ago | parent [-]

TBH I think this is all either fundamentally flawed or incredibly weak except for your final paragraph. That one actually poses a somewhat interesting question - why the seeming disparity between online and offline porn regulations in the US? Still, it fails to address (or even acknowledge) the differences in the impact of requiring ID between those scenarios.

Also I think you have this entire thing exactly backwards. It's not on the rest of us to convince the other camp that ID shouldn't be required. Rather it's on the other camp to put forward a convincing case that ID should be required - that there is no realistic alternative and that the tradeoffs are worth the cost. Otherwise the current status quo wins out.

> Self categorization has been the status quo since the 90s and has been proven to be insufficient.

What are you on about? Legally mandated self categorization has never been tried and would presumably work if there were penalties for violations. You don't even need 100% compliance, you just need high enough compliance that the default becomes to filter out any site that fails to do so.

Voluntary self categorization isn't particularly useful because almost no operators bother to do it. So you're left with no (workable) option other than whitelist filtering.

> have a third party come up with a solution that people can buy to filter us

I never suggested anything of the sort.

> The liability belongs on the people dealing in the restricted item.

The items are not currently restricted and I don't agree with you that they should be. However I would agree to changing things to make all providers liable for accurately self categorizing the content they serve up by means of a standardized header format or some other protocol.

> Why is online ID verification a problem for e.g. porn and gambling but it's fine for alcohol?

Presumably because you have to take receipt of the shipment so the vendor is already going to collect your PII.

Why is legally requiring that a gambling website send a header categorizing itself as such unworkable yet somehow it's all going to work out just fine if we require them to do the much more complicated thing of securely handling and accurately verifying identification documents? That seems like an obvious contradiction to me.

> Why should it be fully anonymous? Should we also allow anonymous porn and cigarette vending machines in person?

Don't we effectively do exactly that? There's no requirement for ID retention on sale of alcohol or cigarettes and until recently the norm was for the clerk to briefly eyeball your license. They also didn't used to bother checking ID if you looked old enough. (That's changed at the major retailers around here lately but that's a different matter.)

Anyway I never claimed the brick and mortar way of doing things was ideal so arguing as though I've agreed to that seems rather disingenuous.

> If you're an adult and spending money online, you already told them who you are

But I did not give them a copy of my ID or any otherwise unnecessary PII and do not want to be required to do so. Also there are plenty of ways to pay for things online without readily revealing your identity to the couterparty. I expect you are well aware of that fact.

> Why is an unrestricted public website different?

For practical reasons I'd imagine. Analogies are great and all but at the end of the day a global electronic communication network has rather different properties than a physical brick and mortar location that you walk into.

Regardless, the reputable services all seem to agree with you (as do I) and thus go out of their way to send headers marking them as adult only. It's roughly equivalent to a shop hanging a "no under 18 allowed" on the door but then not bothering to ID anyone. If parents can't be bothered to configure even the most basic of controls on their children's devices why should the rest of society be made to suffer for that?

ndriscoll 2 days ago | parent [-]

Sending a header is unworkable because nothing obeys it, there are embedded browsers all over, and even if you mandated that every app/browser do so, kids can get a computer/phone for $20 with no restrictions.

There's no requirement for ID retention online either. In fact, unlike in person, it is banned. And a framework where you just say "you are liable for what you provide to children" actually allows for a site employee to briefly eyeball your ID or just look at you and decide you look old enough (though that doesn't really work with realtime video generation).

Record retention is a different question from checking. I think I and the actual relevant laws have been pretty clear that we should disallow that. No, we do not have anonymous cigarette vending machines (at least anywhere I've been in the US). They are always behind a counter with an ID check.

Except for crypto, I don't think I am familiar with any way to pay for something online without revealing my identity. I'm pretty sure 100% of online purchases I've made over the last 20 years have required name/address and usually phone number as part of payment details. Even with crypto, as far as I know common wisdom on darknet markets is (or was?) to use your real name/address as that's the least suspicious. I don't actually know a single place where you don't give that info to your counterparty. I can't imagine it's common.

What parental controls? As far as I know, Safari is the only modern browser that checks RTA headers (if it still does). There are no options for Chrome or more importantly Firefox, which is the only browser that's fit for purpose with malware blocking (especially for children). Similarly Android has no controls.

I don't see what part of being online makes it less practical to check ID. It seems more practical to me. It's just cheaper not to, and online businesses are big on avoiding labor. That's not some fundamental right of theirs.

fc417fc802 2 days ago | parent [-]

The browsers don't support it because only a few major sites bother to send it. The issue here is not support by client software it is lack of participation. That could be fixed via legal mandate, no different than requiring ID checks or anything else.

Right now if you want to build out a filtering solution there's nothing to base it on. We could fix that via regulation and then filtering would just work.

> kids can get a computer/phone for $20 with no restrictions.

At that point ID checks are no good either. They can just visit a site from a different country that doesn't respect our legal framework or hop on tor or bittorrent or whatever else.

In fact when it comes to ID checks if you don't enable parental controls and filtering then they will be able to bypass it in the exact same way as above except using their regular device that you gave to them! No need to go purchase a new one!

So you're inevitably going to end up needing a client side filtering solution regardless. As I keep telling you, the solution you're gunning for here is strictly worse than content filtering based on mandatory headers.

> Except for crypto, I don't think I am familiar with any way to pay for something online without revealing my identity.

There are also virtual credit card services. Or gift cards (which you yourself mentioned earlier).

Of course anything shipped needs a name and address (and likely phone number) but there are plenty of services you can pay for that don't involve shipping a physical item.

> That's not some fundamental right of theirs.

Never said or even implied that to be the case. I think I've been pretty clear that I see it as a threat to privacy, that I don't personally want it, and that I don't think it's the best (or even a particularly good) solution for the stated problems.

It's bizarre to me. You are putting all this effort towards advocating for new regulation that would require a change to how services operate. Simultaneously you argue against a less intrusive solution on the basis that no one currently does it. For some reason everyone can start checking IDs but sending a header is a bridge too far? It's inconsistent.

ndriscoll 2 days ago | parent [-]

> They can just visit a site from a different country that doesn't respect our legal framework

That's called noncompliance. This is why a simpler framework is better: do you demonstrably serve content to children in this jurisdiction illegally? Then you'll incur fines and a warrant here. Better not have revenue or visit here. And we could put the same liability on advertisers funding it so there's just no financial incentive for anyone.

Bittorrent is trivial to block, other countries are easy to block on your router, and it would be simple enough to just say running an open proxy incurs liability for anything you front if you obscure the originating location or allow international traffic. Again the basic principle is "are you providing access to the general public with no gating to restricted material?" In any case, obscure Russian forums you can access through Tor are an afterthought compared to e.g. Reddit, which hosts both Roblox forums and porn today with no wall between them. There's no reason to allow that.

Note also that provider liability doesn't mean we can't also have filtering. Liability just creates the correct incentives for providers to help ensure the solution actually works. If liability with no prescription for a solution would lead to ID checks and not working with vendors to have working filters, that kind of reveals what we think would actually work.

As far as virtual cards go, do they not still require payment information? Surely business don't want to deal with anonymous purchases since that's begging for fraud? In any case, service provider liability is still compatible here. I didn't say they need to check ID. Neither does e.g. the Texas law. It says someone needs to verify age. They can use a commercial service for it. The virtual card provider or gift card retailer could provide that service and assume or share liability.

I'm not even necessarily advocating for a new regulation. I'm saying recognize public indecency/lewd behavior for what it is, and ban things like gambling in children's games. Recognize that public websites with no access gates are public spaces and act accordingly. And yes I consider checking ID for a handful of specific services to be less intrusive than everyone supporting some header. I don't consider the former to be intrusive at all really. The latter is basically impossible if for no other reason than there are already billions of devices that don't. It's a fantasy non solution that basically amounts to "do nothing".

jart 2 days ago | parent | prev [-]

I don't know why I'm the only person online willing to steelman this, but...

The early Internet users weren't people who subscribed to AOL to look at porn in the 90's. They were the people who were granted access to the ARPANET to work in the 80's. The Internet was an exclusive community back then. You had government employees, knowledge workers, and elite university students who had all passed institutional screening processes. You were only allowed to use the ARPANET if you were using it to do something useful and aligned. Therefore you could feel reasonably assured that anyone you talked to online was going to be better than the average person you'd find going outside and walking down the street. If you wanted to know who they were, you could just finger their username. If you wanted to know who owned a domain, you could whois it, get their name and then even write them mail or call them.

People have wanted that old Internet back for a long time. i.e. the one that existed before Eternal September. Those are the people who run your tech companies. The ones who remember what it was like. These people understand what people actually want isn't always the same thing as what they say they want. They understand why the only truly successful Internet spaces on the modern Internet are the ones like Facebook that got people to be non-anonymous. Another example is the best places to work that folks desperately want to get into are the companies like Google whose intranets are much more like the old Internet. These are really the only Internet spaces that normal people want to use. Because people want to interact with other people who are similar to them. Because people want to know who other people are. Otherwise we can't operate as the social creatures that evolution designed us to be. I don't think any civilization in history has operated its public square as a gigantic red light district where everyone is required to wear a mask. So why should we?

Overcoming the anonymous religion problem that somehow glommed onto the hacker and cyberpunk movements is more important and urgent now than it's ever been, because the Internet has been filling up with billions of AI agents. It's gonna be Eternal September in overdrive. Humanity is really facing a tradeoff where you'll have to have gatekeeping again and won't be allowed to conceal who you are, or you can be gaslit by machines forever in your own robot fantasy.

sillysaurusx 2 days ago | parent | prev | next [-]

I’m not sure it’s possible to have different priorities without being stupid or ignorant of history. Once you concede a certain right, such as a right to privacy, you rarely if ever get it back. Most people seem not to care about this, despite ample evidence that it’s something worth caring about. Stupid is the obvious term for it, though obtuse could work as well.

Of course, I don’t blame them. They haven’t lived in a context where they need to care. All of the reasons they’ve heard to care have come from stories of people who lived before them. But ignoring warnings for no good reason is still dumb.

A better thing to engage with is whether we can meaningfully change the situation. It might still be possible, but it requires an effective immune response from everybody on this particular topic. I’m not sure we can, but it’s worth trying to.

Kim_Bruning 2 days ago | parent | next [-]

> They haven’t lived in a context where they need to care.

You might believe you don't need opsec, and then new laws are passed, or your national supreme court overturns the case that gave you your rights, or someone invades; and now suddenly you're wanted for anything from overstaying a visa, outright murder, or simply existing.

USA, right now, peoples lives are being destroyed because the wrong people got their data. Lethal consequences exist in Russia, Ukraine, Israel, Palestine, Lebanon, Iran.

Certain professions per definition: Journalists, Lawyers, Intelligence, Military.

Certain Ethnicities. (Jewish, Somali) ; Faiths...

It doesn't need to be quite this dramatic though. But you might accidentally have broken some laws and don't even know about it yet. Caught a fish? Released a fish? Give the wrong child a bowl of soup [1]. Open the door, refuse to open the door. Signed a register; didn't sign a register. The list of actual examples is endless. The less people know about you, the less they can prosecute.

[1] A flaw in the Dutch Asylum Emergency Measures Act (2025) that would have criminalized offering even a bowl of soup to an undocumented person. The Council of State confirmed this reading. A follow-up bill was needed to fix it.

closeparen 2 days ago | parent [-]

There is no world where a totalitarian government’s law enforcement ambitions on some object-level question are thwarted by the same government’s enforcement of privacy law. Countries with GDPR that are thinking of rounding up and kicking out the refugees know perfectly well who and where the refugees are.

gzread 2 days ago | parent | next [-]

The law is irrelevant in that case but the actual situation is not. If people have never put their personal information online, the bad government can't get it from online. A new phone coming out during the time of the bad government, that says the government requires you to enter your name and address, will not be received as well as if it comes out during good government times.

nandomrumber 2 days ago | parent [-]

> will not be received as well as if it comes out during good government times.

What bearing does that have on anything.

fc417fc802 2 days ago | parent [-]

Making the point that people tend to engage in short term thinking. The reception of the same law, product, or practice will be colored by the current government as opposed to potential future ones.

Kim_Bruning 2 days ago | parent | prev [-]

You're not entirely wrong; ultimately if they put enough resources towards it they can probably catch quite a number of people. But governments have limited resources and really don't track everyone all the time. Not even in 2026 are they able to do that yet. It helps if you maintain some level of opsec. If they really want to get you, they can get close, but see eg Ed Snowden; who managed to stay ahead of the US government just long enough to reach relative safety (FSVO).

nandomrumber 2 days ago | parent [-]

Snowden’s experience doesn’t generalise to, well, anyone really.

Kim_Bruning 2 days ago | parent [-]

Well, I wouldn't personally recommend single-handedly taking on the most powerful nation on earth, myself.

But turns out that if your opsec is decent, and even using mostly publicly available tools like Snowden did, you might survive even that.

In the nuanced case, normal people applying more normal opsec can handle more normal things, would seem to follow.

closeparen 2 days ago | parent | prev | next [-]

I have the right to my own senses, my own observations, my own memories. I have the right to photograph what I can see with my eyes, and to write down what I can remember. Unless enjoined by a specific duty of care (doctor/patient, attorney/client, security clearance, etc) I have the right to discuss my memories with others. This obtains even when using electronic tools and even when working in association with others.

I don’t intend to give up or accept limitations on these rights because you consider yourself to have “privacy rights” or ownership interests in my records, my memories, my perceptions, or the reality in front of me. I find the notion of the government or another person interfering in this process, the perception and recollection of reality, to be creepy and totalitarian by itself.

In 1984, it is not only that the government is aware of Winston, but that it routinely tampers with or destroys evidence of the past & demands to control the perception of the present. I do not think we should let a government do that, even for a good reason like “protect your privacy” any more than we should let it destroy general purpose computing “for the children.”

Kim_Bruning 2 days ago | parent | next [-]

I'm actually fine with that; so long as that is restricted to your own senses, observations, and memories; and doesn't somehow spill over and somehow pertain to mine. Basically the typical freedom to swing your fists ends at the tip of my nose argument. This is probably a solvable problem between reasonable people; give or take.

fc417fc802 2 days ago | parent | prev [-]

It can remain legal to operate a security camera while being illegal to upload unencrypted footage to any third party. I'm not worried about individuals, only about big business and the government.

> This obtains even when using electronic tools and even when working in association with others.

I think it is reasonable to place limits on public "speech" (ex uploading videos of people) without interfering with private (in the case of electronics E2EE) communications.

gzread 2 days ago | parent | prev [-]

There are many people rights people don't have and they're okay with that and even support not having the right to stab people, not having the right to steal from a store, not having the right to take nude pictures of children... What if this one is like that?

micromacrofoot 2 days ago | parent | prev [-]

they are saddled with more problems that they can reasonably care about and broader issues like privacy drop off of their radars because they've never had it

taurath 2 days ago | parent | prev | next [-]

Too many people making too much money - to be honest, people really should blame tech for it, all it takes is RSUs to look the other way. Morally most of the US is running far away from tech and the surveillance state but here it’s still okay to work for monsters and self justify building population control systems and ad networks (often one and the same)

dmix 2 days ago | parent | next [-]

The solution is always to constrain every level of government with more aggressive privacy laws. As long as they are allowed to do it then some private contractors will take the money to help make it ... or government will make their own in house tech teams. Relying on the morals of the general public to limit state surveillance is not a good strategy, but it is of course good when companies take a stand and the tech community creates tools to push back.

throwaway173738 2 days ago | parent | next [-]

It should be prohibited outright. If you allow a loophole for corporations then they will just sell it as a service and we will never be free of it.

taurath 2 days ago | parent | prev | next [-]

Companies create the environment - the government is supposed to be “small” - and it must remain small so the US “consumer” can be leeched from

dmix 2 days ago | parent [-]

The US government is very far from small. That said, I'd be open to rules on the data broker industry though considering it's scale and how the foreign governments can buy/hack them bypassing all of Tiktok-esque national security handwaving.

fc417fc802 2 days ago | parent [-]

> Tiktok-esque national security handwaving.

Algorithmic feeds are propaganda tools. A foreign government being able to propagandize your citizens is a legitimate threat, not handwaving.

Nasrudith 2 days ago | parent [-]

Think for a nanosecond about how exploitable that is. Imagine for a moment that a foreign nation had obtained proof that say ICE was engaged in sex trafficking and publishing it only for it to be blocked as 'destabilizing propaganda'.

If anybody says that propaganda is a valid reason for censorship I say, censor thyself first.

fc417fc802 2 days ago | parent [-]

No one said anything about censorship. There are many things that would pose a threat if controlled by a foreign adversary. Communications platforms with algorithmic feeds are one of them.

greenie_beans 2 days ago | parent | prev [-]

"morals of the general public" helps lead to "more aggressive privacy laws"

arcanemachiner 2 days ago | parent | prev [-]

By RSU, I'm assuming you mean this:

> Restricted Stock Units (RSUs) are a form of equity compensation where employers promise company shares, typically vesting over time, offering a way to align employee interests with company performance

taurath 2 days ago | parent [-]

Yes - you buy the house in the bay, and companies will lock you in with the vesting schedule. Just another 3, 4 years and you’ll be rich enough to afford a second one, or retire early. Some people can self justify what they do, or pretend because they work in a “nicer” part of a company than the core revenue part that it’s all okay that what pays their checks is mass behavior manipulation. I don’t like ads or social coercion, at all.

Nursie 2 days ago | parent | prev | next [-]

> It's too late and never about children,

And this is why these arguments never translate well to mainstream politics.

By declaring a-priori that it is not about the children, and leaping straight to a deeper, more sinister motive that you're sure is there, even if you're right that there are people behind the scenes agitating for these sinister reason, you ignore that a lot of the general public and a lot of the political class genuinely do see this as a child protection issue.

If you can't even concede this, then you're missing large parts of the picture and your attempts to resist it will be that much harder.

Nasrudith 2 days ago | parent [-]

Fuck the idiotic general public then. It was never about the children and everybody knows it. The same people who won't pay half a percent more in property taxes to ensure every schoolkid can get three meals a day suddenly care enough to want to give up privacy for safety? Pull the other one, it has bells on it.

aucisson_masque 2 days ago | parent | prev | next [-]

Has there even been a time when we really had privacy online ?

It didn't take long for the CIA to sniff everything on everyone, early 2000's.

Maybe you're referring to the 90's but at that time the internet wasn't really that popular, it was a niche thing.

catlifeonmars 2 days ago | parent | prev | next [-]

With respect, this take is a good example of all or nothing thinking. It’s not too late.

NeutralCrane 2 days ago | parent | prev | next [-]

I live in an area that has been declared among the safest in America. Two months ago a 17 year old girl from our city disappeared. Turns out she had been being groomed for a year over Discord and in Roblox by a 39 year old the next state over. He eventually convinced her to let him pick her up, after which he filmed himself having sex with her, killed her, and then dismembered her body. He apparently was grooming other underaged girls in a similar way as well.

The digital age presents with it novel forms of danger for children, and for adults for that matter, and there is absolutely no way to effectively address these risks without some amount of reduction in privacy. And before someone inevitably says “where were the parents?” and wash their hands of the situation, a healthy society should care for and protect all children, especially those whose parents do not.

It’s one thing to hold the opinion “I am willing to sacrifice some number of lives, in order to preserve privacy”. That is an honest and potentially justifiable opinion someone may hold. But declaring the situation to simply be a facade to harvest people’s data seems to me like a reflexive response to avoid uncomfortable truths regarding the situation.

chinabot 2 days ago | parent | next [-]

If the government knew every single user on the internet's name, address, phone number and what they had for breakfast, it would not stop monsters like this, or even slow them down.

sensanaty 2 days ago | parent | prev | next [-]

Okay but going off the details you provided this would've also happened if she were 18+? If not via Discord or Roblox, they'd find some other avenue to groom people, lure them in and kill them. 16 might not be an adult, but at least where I come from it's not exactly a child either.

There's always a chance of horrible shit happening, but we shouldn't put every single person under a microscope to ensure the one in a million doesn't occur.

choo-t 2 days ago | parent | prev | next [-]

> But declaring the situation to simply be a facade to harvest people’s data seems to me like a reflexive response to avoid uncomfortable truths regarding the situation.

Well, your example wouldn't be solved by age verification in any way. They could still legally access Roblox or a discord private chat (or even another private chat method) after this law.

So the example show how it is about irrational fear and not protection in any way.

And this is an tragic edge case, if you want to take this kind of edge case in consideration, you also have to take in consideration what the age verification would imply as tragic edge case.

imtringued 2 days ago | parent [-]

I'm here wondering why it would make a difference whether the girl is under 18 or not. You could argue that the criminal has to cover up his crime by getting rid of the evidence (murder) because the girl wasn't 18 yet and therefore it makes sense to stop under 18 year old girls from using the platform because they are living evidence, but it actually sounds more like a problem caused by the law itself.

After all, dating apps are an even more extreme version of this. If you're attractive enough, you get to have many one night stands and many murder opportunities.

fc417fc802 2 days ago | parent | prev | next [-]

There will always be weird tail risks. The law should only get involved where there are widespread systemic problems.

People are occasionally hospitalized due to self, family, or friends handling food improperly. That doesn't warrant a legal intervention whereas dining establishments do.

> before someone inevitably says “where were the parents?” and wash their hands of the situation

Nope, that's exactly what I say. The law cannot reasonably replace responsible parenting if society is to remain a pleasant place to live.

defrost 2 days ago | parent [-]

I live in extremely fire prone areas.

Many of us are pretty damn okay at beating back the flame and controlling the flow of the worst of things away from homes, but nobody is perfect.

We don't expect every family and parent in these areas to have fire fighting skills, self evacuation is recommended.

Parents every where now find themselves surrounded by the delibrately laid gasoline of addictive social media and grooming risks et al. and it's infeasible to expect every parent be skilled in defensive cyber secuirty.

It's reasonable to expect communities to want simple barriers and means of protection, the existance of reasonable control and throttling options for parents.

fc417fc802 2 days ago | parent [-]

I agree with that however I'm puzzled by your comment because in the context that you're responding to I don't think I said anything that would imply otherwise. Being particularly skilled in "defensive cyber security" isn't a requirement to avoid grooming of your child in the general case - some combination of communication, supervision, and filtering is.

> It's reasonable to expect communities to want simple barriers and means of protection, the existance of reasonable control and throttling options for parents.

I agree 100%! However ID verification is not a reasonable (or even particularly effective) solution to that. I apologize if I've misconstrued your intended meaning but given the broader context that's what it seems like you're implying.

Realistically there's no way to prevent grooming other than keeping tabs on your child. The least labor intensive (but also most intrusive) way to do that is probably whitelist parental controls and watching for unauthorized devices. It is not even remotely realistic to expect a communication platform to detect that a child is speaking with an adult they don't know (as opposed to one they do) and also that it isn't a benign interaction (such as a gaming group or etc) and then somehow act on that information (how?) without manufacturing an absurd dystopia in the process.

When it comes to filtering I think it would be reasonable to impose a standard self categorization protocol on all website operators. That would make non-whitelist filtering much more reliable (a boon to parents, educators, and employers) without negatively impacting privacy or personal freedoms.

defrost 2 days ago | parent [-]

Okay, in the specific upthread context;

* there are very few urban population clump on the planet that don't face the threat of child grooming and exploitation, both before and after the digital device explosion.

* that threat vector significantly increased and morphed with the spread of personal digital devices for children; the threat comes no longer from potentially any personal with contact in real life, it has now expanded to include potentially the entire digital world and now can be automated via groomGPT

* A simple "where were the parents" response on a per parent basis is unfair in the sense that spotting grooming in a digital device world is a difficult challenge .. even a simple constrained playground with stock babytalk language construction can be socially backdoored (See: "I want to stick my long-necked Giraffe up your fluffy white bunny" )

* Concerned parents will look for solutions, communities, at local, state, and federal levels should devote resources to providing solutions in informed contexts and graduated levels.

* Unaware parents will exist, and will likely dominate the demographics, or not?

* Is the correct _default_ social policy here (answer varies by country and culture) to shield the less cyber aware from the worst of the worst with filters ... that the better informed can bypass or deselect?

I guess where we diverge on PoV is where the perimeter of swiss cheese protection should extend to.

AJ007 2 days ago | parent | prev | next [-]

Discord & Roblox - no encryption, privacy, or anonymity on either of those platforms, by the way.

mindslight 2 days ago | parent | prev | next [-]

Still none of that necessitates the type of mandatory partial-ID verification being pushed by these laws.

Roblox can straightforwardly require ID verification on their own, of both the parent responsible for the account, as well as the children directly (request documentation from their school, birth certificate, etc. Yes, high touch to verify these documents. But we're talking protecting children here, right?)

If anything this type of legislation is about absolving them of the responsibility of doing so!. Imagine a company making their offering "for adults only", with de facto kid usage as parents relent and just let their kid use an older age on the computer.

heavyset_go 2 days ago | parent | prev | next [-]

I'm sure the same government that held the Epstein class responsible will get right on to making sure his proteges are brought to justice, we just need to give up more freedoms first.

weird_tentacles 2 days ago | parent | prev [-]

[dead]

SilverElfin 2 days ago | parent | prev | next [-]

For the government it may be surveillance. For the people funding these new laws, it is about advertising profits. See what I said at https://news.ycombinator.com/item?id=47471747

mattmanser 2 days ago | parent | prev [-]

Go watch the newest Louis Theroux, into the manosphere.

At points Louis and whatever absolute scumbag he's with walk around the streets while the guy is filming his own content.

There are kids, literally 11/12 year olds, walking up to these predatory, evil, scammers on the street going "oh my god it's MC" or whatever their name is. Multiple times.

And he hardly gets to spend any time with these men because they clock pretty quickly they're not going to come off well.

In the space of like 3 days, Louis caught on camera at least 10/20 young kids recognizing these toxic people from videos they had watched. Even the ones who'd been banned from most platforms, because their videos get reshared under different accounts and insta/tiktok/facebook aren't bothering to catch these reshares.

It really is about the kids.

And it all comes down to these people convincing young men to spend money on scam courses or invest in scam brokerages by getting them to join telegram group chats. And suddenly it's really clear to me why telegram's under scrutiny.

zingerlio 2 days ago | parent | next [-]

I share your observations and concerns. But I don't think the current erosion of digital privacy and the censorship creep were made to address those. There are better ways (even though they are not fully fleshed out yet) to minimize toxic/populist influence, but a blank cheque to sacrifice our rights isn't one.

gzread 2 days ago | parent [-]

Some of them clearly are - the one in California.

weird_tentacles 2 days ago | parent | prev [-]

[dead]